The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation.
Key points
- CISA added CVE-2026-96951 and CVE-2026-104935 to its KEV Catalog.
- The vulnerabilities are actively exploited and pose risks to federal agencies.
- BOD 26-04 requires FCEB agencies to prioritize KEV Catalog vulnerability remediation.
- CISA encourages all organizations to adopt risk-based vulnerability management.
The newly added vulnerabilities are CVE-2026-96951, a Microsoft Windows Command Injection Vulnerability, and CVE-2026-104935, an Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability.
CISA notes that these types of vulnerabilities are common attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Binding Operational Directive (BOD) 26-04 establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, emphasizing the prioritization of rapid remediation for high-risk vulnerabilities listed in the KEV Catalog on publicly exposed assets.
While BOD 26-04 specifically applies to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize the remediation of KEV Catalog vulnerabilities.
Organizations aware of an exploited vulnerability not currently listed in the KEV Catalog can submit it for potential addition through CISA’s KEV Nomination Form, provided it has a CVE ID, evidence of exploitation, and clear mitigation guidance.
Sources and references
Original report
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA
Read on CISA (opens in a new tab)Linked in the original report
Ref 0092TH7X
Cite this
APA
Interestana AI Editorial. (2026, October 13). CISA Adds Two Exploited Vulnerabilities to Catalog. Interestana. https://interestana.com/articles/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-0092th7x
MLA
“CISA Adds Two Exploited Vulnerabilities to Catalog.” Interestana, 13 Oct. 2026, interestana.com/articles/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-0092th7x.
Chicago
Interestana AI Editorial. “CISA Adds Two Exploited Vulnerabilities to Catalog.” Interestana, October 13, 2026. https://interestana.com/articles/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-0092th7x.
BibTeX
@misc{interestana_0092th7x,
author = {{Interestana AI Editorial}},
title = {{CISA Adds Two Exploited Vulnerabilities to Catalog}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-0092th7x},
note = {Summary of reporting by CISA, https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog}
}Credit the source
Original reporting: CISA, “CISA Adds Two Known Exploited Vulnerabilities to Catalog”, https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog(opens in a new tab)
Follow this story
Get Cybersecurity in your inbox — new stories in 40 words or fewer, once a week.
Subscribe